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1 1. (Amended) Adapted to facilitate communications between a client device 

2 and a remote device, an [An] apparatus comprising: 

3 a network interface^ through which the apparatus facilitates communication 

4 between a client device and a remote device at any of a number of alternative service 

5 levels] including (i) filters to control access to different service levels and (ii) a classifier. 

6 communicatively coupled to the filters, to classify and mark one of the service levels 

7 associated with a received data packet in response to satisfying filter criteria associated 

8 with at least one filter : and 



9 a controller^] coupled to the network interface, to dynamically create and remove 

1 0 &e filters controlling access to the different service levels based, at least in part, on an 

1 1 admissions profile. 

1 2. (Amended) The apparatus of claim 1, wherein the at least one filter 

2 [filter(s)], when triggered, initiate an admission control decision preventing premature 

3 allocation of service level resources which are not yet required or authorized. 

1 3. (Amended) The apparatus of claim 2, wherein each of the filters is [are] 

2 triggered by information contained within £fcg received data packet[s] . 

1 4. (Amended) The apparatus of claim 3, wheremeach_of the filters is [are] 

2 triggered by one or both of packet source information and p acket destination information, 

1 5, The apparatus of claim 1, wherein the admissions profile is stored in a 

2 communicatively coupled remote device. 

1 6. The apparatus of claim 5, wherein the communicatively coupled remote 

2 device is a bandwidth broker or other generic policy server. 

1 7. The apparatus of claim 1, wherein the admissions profile is available 

2 locally within the apparatus. 
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1 8. The apparatus of claim 1, wherein the controller establishes an ingress 

2 profile in response to detecting an associated trigger event, wherein the ingress profile 

3 modifies the received data packetfs] adhering to the filter criteria to denote a particular 

4 service level, in accordance with the admissions profile. 

1 9. The apparatus of claim 8, wherein the controller removes ingress profiles 

2 when data packets adhering to the filter criteria are no longer received, liberating 

3 apparatus resources. 

1 1 0. The apparatus of claim 8, wherein the controller removes ingress profiles 

2 after a predetermined period of time, liberating apparatus resources. 

1 11. (Amended) The apparatus of claim 1 , wherein the controller removes at 

2 least one of the filters in accordance with a network administration policy. 

1 12. (Amended) The apparatus of claim 1 1 , wherein the controller removes at 

2 least one of the filters based, at least in part, on time-of-day. 

1 13. (Amended) A method for controlling provision of differentiated services 

2 in a data network, the method comprising: 

3 (a) installing a filter on a network edge device to provide a trigger notification 

4 upon detecting data packets adhering to filter criteria[ ( in accordance with a network 

5 administration policy]; [and 

6 (b) dynamically creating an ingress profiler which polices admission to a 

7 particular service level] 

8 £b) determining whether a received data pac ket satisfies the filter criteria: and 

9 Lc| issuing a command bv a bandwidth bro ker to a contro ller of the network 

10 edge device to dynamically install or remove a filter in response to determining whether 

11 the received data packet satisfies the filter criteria . 
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1 14. The method of claim 13, further comprising [(c)] £dj marking the received 

2 data packets adhering to the filter criteria according to a subscribed service level. 

1 15. (CANCEL) 

1 16. (New) The apparatus of claim 1. wherein the classifier marks a Type of 

2 Service (ToSI field of the received data packet to denote a level of service for 

3 transmission of the data packet. 
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17. (New) The apparatus of claim L wherein the controller further 
dynamically controls access to at least one classifier profile in accordance with the 
admission profile. 
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